dependabot[bot] and Xiyuan Chen
2f70049187
chore(deps): bump json-repair from 0.59.4 to 0.60.1 in /api ( #38879 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 47073bf1dc
2026-07-15 01:20:03 -07:00
wangxiaolei and Xiyuan Chen
977e1abe8a
chore: workflow comment remove rbac check ( #38978 )
...
(cherry picked from commit b3386192cc
2026-07-15 01:20:03 -07:00
Xiyuan Chen and 林玮 (Jade Lin)
5c0a0759f0
fix: preserve ResponseStreamFilter state across workflow pause/resume ( #38540 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit d72ee32ba1
2026-07-15 14:47:22 +08:00
林玮 (Jade Lin)
3443054d96
fix(api): harden trial apps access for recommended apps ( #38970 )
...
(cherry picked from commit edca982b1e
2026-07-15 14:36:35 +08:00
wangxiaolei and Xiyuan Chen
be737a3504
feat: when knowledge permission is all team need update rbac setttings ( #38911 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit c278148c8f
2026-07-14 03:52:24 -07:00
wangxiaolei and Xiyuan Chen
e0b910d43d
feat: create app init rbac scope to all and add workspace members. ( #38636 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 7e05f28a46
2026-07-14 03:52:24 -07:00
Snakinya and Coding On Star
56d87d6318
fix: SSRF bypass via raw httpx.get in API tool schema fetch ( #37746 )
...
Co-authored-by: 归青 <guiqing.lzw@antgroup.com >
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
(cherry picked from commit ae0d6ee214
2026-07-14 18:23:54 +08:00
林玮 (Jade Lin) and Coding On Star
73db4d3932
feat(oauth): preserve redirect_url through OAuth state for post-login… ( #38900 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 82ff93cbdd
2026-07-14 18:23:54 +08:00
林玮 (Jade Lin) and Coding On Star
13c6556e6f
fix(api): require trial app registration for reads ( #38858 )
...
(cherry picked from commit 8e0d10bf5e
2026-07-14 18:23:54 +08:00
Xin Zhang and Xiyuan Chen
7570427f51
feat(enterprise): enforce licensed seats cap at account creation ( #38883 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 28a036066a
2026-07-14 00:22:05 -07:00
Xiyuan Chen
48717e5981
chore(deps): bump python-engineio, python-socketio, soupsieve for CVE fixes ( #38844 )
...
(cherry picked from commit c21a248df6
2026-07-13 01:04:45 -07:00
Xiyuan Chen
5805b94e23
fix(api): wire dedicated timeout into inner RBAC requests ( #38150 )
...
(cherry picked from commit 0d5f43520c
2026-07-12 23:39:30 -07:00
Jashwanth Reddy Gummula and Xiyuan Chen
c64c772b5b
fix: resolve 36288 mypy errors ( #37850 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
(cherry picked from commit dd0c4a2296
2026-07-12 21:53:31 -07:00
FFXN and Xiyuan Chen
b4537455cf
fix: enhance SQL query safety and add metadata key validation ( #38307 )
...
(cherry picked from commit 88864ae086
2026-07-12 21:53:31 -07:00
FFXN and Xiyuan Chen
5fe010b653
fix: sql injection ( #38295 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
(cherry picked from commit d9884efaee
2026-07-12 21:53:31 -07:00
蒜香飞行矮堇瓜 and Xiyuan Chen
66cd69b07e
fix(api): avoid infinite loop in _delete_records when batch deletion fails ( #38118 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 089c3f4af0
2026-07-12 21:53:31 -07:00
linhongkuan and Xiyuan Chen
09eca00370
fix(api): isolate side-effect database writes ( #37895 )
...
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com >
(cherry picked from commit d8f3be4bcd
2026-07-12 21:53:31 -07:00
Xiyuan Chen
12cf69e5c8
fix(api): register rbac-migrate-dataset-permissions CLI command ( #38204 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ce13d1773
2026-07-12 21:53:31 -07:00
wangxiaolei and Xiyuan Chen
4332023806
feat: support dataset permission migrate to rbac ( #38166 )
...
(cherry picked from commit 528bf95d1b
2026-07-12 21:53:31 -07:00
wangxiaolei and Xiyuan Chen
8adbda988b
perf: make command rbac-migrate-member-roles use less mem and make it… ( #38151 )
...
(cherry picked from commit 49a92f096f
2026-07-12 21:53:31 -07:00
-LAN- and Xiyuan Chen
876ac24496
fix(api): require edit access for trace config changes ( #37973 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 0035d90e36
2026-07-12 21:53:31 -07:00
wangxiaolei
8b0892fd79
fix: fix auth prefix duplicate ( #38616 )
2026-07-10 10:51:05 +08:00
autofix-ci[bot] and Yansong Zhang
d3df1b2847
[autofix.ci] apply automated fixes
2026-07-08 09:55:47 +08:00
Yansong Zhang
709aac9337
test: cover credit pool quota paths
2026-07-08 09:55:47 +08:00
Yansong Zhang
865affdd9b
test: update quota billing service mocks
2026-07-08 09:55:47 +08:00
Yansong Zhang
71840c3f71
fix(api): route quota calls to new billing
2026-07-08 09:55:47 +08:00
Yansong Zhang
dc09aea7b3
feat(api): use billing quota for credit pool
2026-07-08 09:55:47 +08:00
非法操作
99507a5ae5
fix: editor should not manage member ( #38503 )
...
(cherry picked from commit faaa4708a6
2026-07-07 16:09:47 +08:00
55ae0aadf8
fix(api): resolve plugin external user ids in backwards invocation ( #38098 )
...
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com >
Co-authored-by: Harsh Kashyap <harshkashyap@Harshs-MacBook-Pro.local >
2026-07-06 17:12:39 +08:00
非法操作
6c4ba71a23
chore: use zstd for plugin model provider cache ( #38382 )
...
(cherry picked from commit 91cc50371b
2026-07-03 17:19:43 +08:00
非法操作
3e392527e9
chore: compress large plugin_model obj in redis ( #38374 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 059a1fe090
2026-07-03 17:19:43 +08:00
WH-2099 and 非法操作
36d3a9c7fb
fix(api): keep provider refresh waiters single-flight ( #38226 )
...
(cherry picked from commit 7fb797c121
2026-07-03 17:19:43 +08:00
Manan Bansal and 非法操作
a83c7e89e0
fix(api): tolerate legacy service_api end-user type on load ( #38271 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
(cherry picked from commit 41fb484491
2026-07-03 10:55:44 +08:00
wangxiaolei and 非法操作
30c8e9b08d
fix: Working outside of application context. ( #38300 )
...
(cherry picked from commit 826b259d9f
2026-07-02 15:07:12 +08:00
Bond Zhu and 非法操作
2a63f26796
fix(workflow): guard on_tool_execution stdout traces behind DEBUG ( #38200 )
...
(cherry picked from commit 03d59dba47
2026-07-01 14:05:02 +08:00
非法操作
71a936e89a
fix: editor can view the logs ( #38165 )
...
(cherry picked from commit fa1ac75922
2026-07-01 14:05:02 +08:00
Yunlu Wen and GitHub
3aa26fb637
chore: bump versions to 1.15.0 ( #37929 )
2026-06-25 12:02:38 +00:00
林玮 (Jade Lin) and GitHub
aa37c1d833
fix(api): tongyi credential compatibility ( #37942 )
2026-06-25 10:25:24 +00:00
e90c7ab8a7
refactor(tests): replace logger mocks with caplog ( #37468 ) ( #37922 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 09:48:43 +00:00
40119fef44
feat: update monitor permission key and plugin permission key ( #37937 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 09:41:38 +00:00
72a03c2d6a
refactor(test): replace SimpleNamespace with real UploadFile model in test_dataset_models.py ( #37935 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-25 09:35:24 +00:00
QuantumGhost and GitHub
b33e8f0ddb
fix: improve error handling for workflow execution ( #37919 )
2026-06-25 07:36:34 +00:00
8f74e176ca
fix: remove redundant snippets permissions ( #37921 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-25 07:27:16 +00:00
Gateway and GitHub
abf2986299
build(deps): update Bleach sanitizer security fix ( #37860 )
2026-06-25 06:32:48 +00:00
d93989bfc0
chore: add type to test ( #37876 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 03:01:09 +00:00
31a50a3b20
fix: eagerly validate conversation before generator to prevent hanging ( #37224 )
...
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
2026-06-25 02:57:33 +00:00
9fc2925b00
feat: delete member delete rbac binding ( #37904 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-25 02:08:07 +00:00
2483c091aa
refactor: replace logger patches with pytest caplog in tests ( #37890 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-06-24 21:40:06 +00:00
4964359961
refactor(tests): use caplog in web login tests ( #37889 )
...
Co-authored-by: lin-hongkuan <lin-hongkuan@users.noreply.github.com >
2026-06-24 14:44:01 +00:00
d87764b0f8
feat: filter dataset operator and add miss permission key ( #37867 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-24 09:56:28 +00:00
